Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
File: LzE27RCZhYClF9lZiryjPZumZZk.mft (raw, json)
Hash identifier: lXVVfuKFLrQ4+wGKtCwBrl7oXyfA6AWUPKUbpGXX5OY=
Subject key identifier: 73:DD:AD:0A:8D:81:97:CE:43:36:41:FE:58:6F:86:76:B2:ED:34:D9
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 0199FAD7F4791694CD537B43AC7EF899C687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
Manifest number: 1135
Signing time: Sun 19 Oct 2025 05:01:20 +0000
Manifest this update: Sun 19 Oct 2025 05:01:20 +0000
Manifest next update: Mon 20 Oct 2025 05:01:20 +0000
Files and hashes: 1: 3Q4-nm9Afpxwl-rsuAE0uraA2Ho.roa (hash: w0/s8wW3wnSLtMZE2Dd4d4ibLqmaSIOhu54oA3SxPvE=)
2: HDL5ZJqNUyVr9DbXIHa7pOPbkPY.roa (hash: iNFv7uh4fJNYsidDC1mbFWGoIExhoy9Ks/MOwn2QcMo=)
3: LzE27RCZhYClF9lZiryjPZumZZk.crl (hash: J6NN+8yGg3CzvKLU2OIra3rXW1tBO4Fv0/CqlTMzwVA=)
4: dHr3S3MtNvYw9zPAytJUJf5Polg.roa (hash: 6ik71U5mDCDLej/D58qufytoq9ZgmhfMCzyzKL+xxNA=)
5: xYnFzzsD7iGLZFG3m7HFCBMtp2E.roa (hash: W3AHQ2GuMJRuqPrOv5nSrVbrayQVkMMCq5xQ40+kvG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f4:79:16:94:cd:53:7b:43:ac:7e:f8:99:c6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Oct 19 05:01:20 2025 GMT
Not After : Oct 20 05:01:20 2025 GMT
Subject: CN=73ddad0a8d8197ce433641fe586f8676b2ed34d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:70:ea:89:d0:79:d2:4c:88:da:82:b7:66:9f:
75:8f:c7:af:98:ff:90:fe:6a:f2:cc:64:84:03:03:
c5:9e:a6:07:1b:18:07:03:b9:22:0f:b8:92:d5:f3:
9c:77:57:2d:df:7f:7b:7c:77:b0:ad:72:b0:18:b4:
2f:ae:d4:f0:fe:d9:e2:a3:51:38:1e:b1:8a:ef:b9:
95:f1:38:4e:ad:b6:32:0a:61:9e:a5:ae:74:e2:d8:
a2:19:1d:3b:fb:34:fb:ce:fb:0c:df:af:1a:db:0e:
72:ad:01:f9:b5:f9:8a:e0:31:58:b8:e6:e9:75:7e:
0b:d5:72:d2:3a:2a:06:3e:56:10:9a:c3:e9:57:62:
7f:58:a3:40:85:db:c9:2f:a5:d2:aa:37:69:33:39:
cd:63:12:6f:6c:9d:77:0b:be:25:fe:29:0c:f9:df:
64:74:99:19:be:81:21:57:a9:e4:ca:90:14:fc:0e:
c0:97:5f:34:f5:b6:43:d1:6a:b6:1c:39:fc:02:d2:
40:db:a6:97:66:97:71:31:af:a9:52:00:1f:01:46:
d5:2a:22:fe:c7:32:1b:af:08:8f:bc:35:f7:e5:d5:
9a:ec:8b:c3:0d:86:01:ce:ff:73:e1:32:35:cf:ad:
0c:02:49:02:a4:84:a0:6f:b3:fa:f8:a5:7b:3f:0b:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DD:AD:0A:8D:81:97:CE:43:36:41:FE:58:6F:86:76:B2:ED:34:D9
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ed:34:04:c2:5f:3d:b1:50:c2:90:e8:ee:6d:98:49:c9:18:
da:58:b9:d2:aa:fa:ae:80:de:c3:84:c4:9d:e4:9a:37:17:51:
34:87:9a:81:ec:65:f2:45:36:eb:01:5f:47:26:56:b4:6c:b8:
93:3c:46:36:9c:d0:d6:3d:8a:fa:35:36:da:d5:e9:d1:4e:af:
43:d2:d2:cd:7e:8f:f1:fd:41:7a:c9:9f:78:96:9b:c6:e5:51:
6f:da:52:ac:78:93:aa:bf:5d:cb:1e:95:9c:0a:f7:f6:0c:0c:
ab:71:e4:15:a4:eb:a0:42:f9:8b:94:85:ac:43:5c:05:c3:2f:
92:38:ef:b9:57:a8:d0:f4:00:0c:c3:ae:07:9f:c8:54:57:1e:
93:a5:0c:8e:eb:2f:7c:69:d1:37:a3:f7:02:e1:48:d6:78:b6:
47:0b:83:3f:f3:56:72:a2:a7:99:7d:3f:63:3a:a7:af:de:20:
40:99:57:6a:d6:66:01:1b:b0:d5:99:40:3e:17:93:91:53:d6:
f4:d6:64:fd:3f:6e:cb:9e:14:0c:bb:19:84:d3:78:0c:cc:a3:
a0:9b:78:c1:7c:2d:b8:f5:e3:7c:31:f8:c5:e6:f1:f6:4a:da:
b1:74:19:a0:49:e5:c9:ab:70:a2:ef:e0:a2:82:fc:6c:c8:c2:
63:e6:22:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:12 2025 by rpki-client